Redis security advisory (AV26-423)

Back Cyber.Gc.Ca

Redis security advisory (AV26-423)

Cyber.Gc.Ca • May 5, 2026

Share: View original

On May 5, 2026, Redis published a security advisory to address vulnerabilities in the following products:

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Redis Security Advisory Addresses Multiple Vulnerabilities On May 5, 2026, Redis published a security advisory detailing five vulnerabilities, including CVE-2026-23479, CVE-2026-25243, CVE-2026-25588, CVE-2026-25589, and CVE-2026-23631. These vulnerabilities allow for remote code execution (RCE) if an attacker gains authenticated access to a Redis instance. Redis Cloud customers are automatically protected, while self-managed users must upgrade to the latest versions to mitigate risks. The vulnerabilities were reported by security researchers, and as of the advisory's publication, there is no evidence of exploitation in the wild. Users are encouraged to review their configurations and apply necessary updates to safeguard their systems. 5 sources 58

Extracted Entities

Platforms (1)